Overview
- The intrusion, detected on November 14, may have exposed personal records for up to 1.2 million employees who use Pajemploi.
- Potentially accessed data include names, dates and places of birth, postal addresses, social-security numbers, bank institution names, Pajemploi numbers and approval numbers.
- Urssaf says bank account numbers (IBAN), email addresses, phone numbers and login passwords were not compromised.
- Operations continued normally for declarations and salary payments, and other Urssaf services were not affected.
- Urssaf notified CNIL and ANSSI, will file a criminal complaint, will inform each affected user individually, and urges vigilance against phishing or fraud.